Overview

overview

3

Static

static

3

FlasheDeco...ed.exe

windows10-2004-x64

3

FlasheDeco...ed.exe

windows10-ltsc_2021-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    44s
  • max time network
    41s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/06/2026, 14:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FlasheDecoder_Slayed.exe
  • Size 33KB
  • Sample260625-rf14macv8v
  • SHA256 890b8f57a490dc49ee45c5451553d8650b484230e7d4b1f7857c5efc6049acc3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\FlasheDecoder_Slayed.exe
    "C:\Users\Admin\AppData\Local\Temp\FlasheDecoder_Slayed.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2924
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2924 -s 1060
      2⤵
      • Program crash
      PID:384
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2924 -ip 2924
    1⤵
      PID:4692

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          AddUninstall.asx
          • Path C:\Users\Admin\Desktop\AddUninstall.asx
          • Size 301KB
          • SHA256 e74f3077e26b72def996cf2ac12f6c566887749df0bf1efe0a7516a563b14363
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CloseDeny.vsdx
          • Path C:\Users\Admin\Desktop\CloseDeny.vsdx
          • Size 432KB
          • SHA256 2d9a523b9689f548066c4a706371adde76931b99f5f26e4c786a41e00c8ea449
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CompareUnblock.cab
          • Path C:\Users\Admin\Desktop\CompareUnblock.cab
          • Size 454KB
          • SHA256 957c16a88f87fee5eaf0ea7d4174ee4f8fe76393adac4add93a0fc2ab62a59ba
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CompressInvoke.aif
          • Path C:\Users\Admin\Desktop\CompressInvoke.aif
          • Size 158KB
          • SHA256 a20d5a165f4130d59b89896fd3657769f206a26227d69e57e35adcae2e46805d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConvertToExpand.mp4v
          • Path C:\Users\Admin\Desktop\ConvertToExpand.mp4v
          • Size 202KB
          • SHA256 d92cea92d9f34dc5cbd27b9b3f6943594cd8c57b68bcf5dece9df747b13bc651
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CopyWait.docx
          • Path C:\Users\Admin\Desktop\CopyWait.docx
          • Size 18KB
          • SHA256 78a09b817d69ffe58b78c3a171f7684dde46292ced8684cb1a04bfa4520d8cb6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DisconnectProtect.wpl
          • Path C:\Users\Admin\Desktop\DisconnectProtect.wpl
          • Size 268KB
          • SHA256 7735f6ad636fd5f2ee047dd6d5c5beca27c272a4b0039c409befda7357a86cca
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ExportShow.xlt
          • Path C:\Users\Admin\Desktop\ExportShow.xlt
          • Size 378KB
          • SHA256 4d0a1e71693b0e89a717e1eaf1cc00a7251de5a4d7fd2bcfeb7d797054bea1fa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FormatRead.snd
          • Path C:\Users\Admin\Desktop\FormatRead.snd
          • Size 410KB
          • SHA256 1a6f9e0f009cb45986f07cdc5a8a7c5e4896ed5a5d0d430dcf0cb8d90f730a34
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GetOptimize.3gp
          • Path C:\Users\Admin\Desktop\GetOptimize.3gp
          • Size 224KB
          • SHA256 e77db8a73675a68b59aaa2ccaa1298dde435e82254c2baa72f1f6b3b3287b092
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GroupOpen.php
          • Path C:\Users\Admin\Desktop\GroupOpen.php
          • Size 290KB
          • SHA256 b7b83811f97bc32006ef60207fe9da6cc10f0b58a6a39f46a4e4e076833580b0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LockAdd.bin
          • Path C:\Users\Admin\Desktop\LockAdd.bin
          • Size 169KB
          • SHA256 8eb16c1de368275255aa0c93d0a7dfb62bf6fc9d263b8add64b0ee47be067e1c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MergeSplit.otf
          • Path C:\Users\Admin\Desktop\MergeSplit.otf
          • Size 334KB
          • SHA256 fe9afc4f35194ee750c975f5c5f4f758d30fb14931018ba33384a831647d2673
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft Edge.lnk
          • Path C:\Users\Admin\Desktop\Microsoft Edge.lnk
          • Size 2KB
          • SHA256 03c855016f5c79590f1062672997a08eec6a71b72710b8cc27d5b9e8d6b875ac
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          MoveConvertFrom.rmi
          • Path C:\Users\Admin\Desktop\MoveConvertFrom.rmi
          • Size 421KB
          • SHA256 b0678a60050a5c15e1b7467b296a2d4c72187e954693a9781d183986ddc7d3b3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PingRestore.dot
          • Path C:\Users\Admin\Desktop\PingRestore.dot
          • Size 235KB
          • SHA256 71a80b384fdcb20dd1f43d94e719c318c310cf42ef036b70d6a43353f201deef
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ProtectCompare.xlsm
          • Path C:\Users\Admin\Desktop\ProtectCompare.xlsm
          • Size 443KB
          • SHA256 b8dec7f1ec14de4e6b9de32b1e1005b59babfee355b5a8e013b759e1dfcdf2af
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ReadSkip.mhtml
          • Path C:\Users\Admin\Desktop\ReadSkip.mhtml
          • Size 367KB
          • SHA256 5a4a4f4b7add75285188d7fa4d2bf5568263e8dfe6a9f2da81f2d84525d628bd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RegisterLock.xlsx
          • Path C:\Users\Admin\Desktop\RegisterLock.xlsx
          • Size 10KB
          • SHA256 2eaebfe834c654b8e9d68db1a10818465e5b5a87f39bf2d99475d2c91c748f93
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RenameEnter.vbs
          • Path C:\Users\Admin\Desktop\RenameEnter.vbs
          • Size 323KB
          • SHA256 32e074dde54c7c949e8d3f5bf4dc7a9d7cb0af9d4f00c24cafa62d98e57602d1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResetUse.M2TS
          • Path C:\Users\Admin\Desktop\ResetUse.M2TS
          • Size 312KB
          • SHA256 a2b326428165c4380269e9c09e136b5efc378ee72db34dc258c0b49f2edf7ad0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResumeBlock.vstm
          • Path C:\Users\Admin\Desktop\ResumeBlock.vstm
          • Size 180KB
          • SHA256 fafd643868b324fad6f8e89798b26357bedd2ca091b7beba950897952493acc3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResumeGroup.rle
          • Path C:\Users\Admin\Desktop\ResumeGroup.rle
          • Size 191KB
          • SHA256 17d219b16168b9aeb20db148c5f3bc5e3206884f13d0bba2f34ad29517ea9c06
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResumeSync.mpg
          • Path C:\Users\Admin\Desktop\ResumeSync.mpg
          • Size 213KB
          • SHA256 ab3506f92ad630adbcb7d1845770550ae867b371ab34f2fdf3bbf47715d60610
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SendStep.svgz
          • Path C:\Users\Admin\Desktop\SendStep.svgz
          • Size 246KB
          • SHA256 3504460b2ec3349dc97685215f215919c073062e00d519273441686191b7cc49
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SetRead.xlsx
          • Path C:\Users\Admin\Desktop\SetRead.xlsx
          • Size 12KB
          • SHA256 c9c5d91e8178c4009785f87d1e3920b4d60272c072390432773eec13d0008259
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SubmitDisable.mpeg
          • Path C:\Users\Admin\Desktop\SubmitDisable.mpeg
          • Size 345KB
          • SHA256 b7b195027d174843b109684885439ede1e4339e3049c071b4e0cb865b5d8c37b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SuspendRestart.vdw
          • Path C:\Users\Admin\Desktop\SuspendRestart.vdw
          • Size 279KB
          • SHA256 9b7391895906a3a1be3beb3ba5dc08edacca26b135dc35fc76df785d0249f8ff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SuspendSplit.M2TS
          • Path C:\Users\Admin\Desktop\SuspendSplit.M2TS
          • Size 399KB
          • SHA256 a90b4327daf78d8a6484193d9d61481da5ed83be665348d5e4e7627cf2c09a74
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SwitchInitialize.docx
          • Path C:\Users\Admin\Desktop\SwitchInitialize.docx
          • Size 19KB
          • SHA256 c58c7cf750b209fb17395835bc49a94f7d6fed83f20fb780cb1b5ed797f70315
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TraceOpen.crw
          • Path C:\Users\Admin\Desktop\TraceOpen.crw
          • Size 624KB
          • SHA256 6838d029256ec1b9f58fc6edd6342255e88da9a3241e841f61516ebbfa14f109
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnpublishHide.potm
          • Path C:\Users\Admin\Desktop\UnpublishHide.potm
          • Size 356KB
          • SHA256 175c3eaddf1ded5cc658bbebbb5f3472f72abe6d18476870f9b93a9c879f48a3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WaitAssert.midi
          • Path C:\Users\Admin\Desktop\WaitAssert.midi
          • Size 389KB
          • SHA256 bd07eeeda4df751ef8fb2283cf2de7a6c236e9b20566d6c8dea86a51c41874c3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WatchDebug.wmf
          • Path C:\Users\Admin\Desktop\WatchDebug.wmf
          • Size 257KB
          • SHA256 f23be63cc0ff0c77bb565528aea0bcd943711017f81283e5dc5e57b349c3e438
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Acrobat Reader DC.lnk
          • Path C:\Users\Public\Desktop\Acrobat Reader DC.lnk
          • Size 2KB
          • SHA256 0da02e94429367ccade7e6840d2e7722d13c806c293e1441efd13554eff62c01
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Firefox.lnk
          • Path C:\Users\Public\Desktop\Firefox.lnk
          • Size 1KB
          • SHA256 70387db43cfb79e7543e13e91a76fcffb1a91c7a807a9df0e6fd094b900eb1c6
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Google Chrome.lnk
          • Path C:\Users\Public\Desktop\Google Chrome.lnk
          • Size 2KB
          • SHA256 7ab17b4e9c414ede7b2ad1628d10c0ecb515ae875fcb7b399a8b888254508578
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          VLC media player.lnk
          • Path C:\Users\Public\Desktop\VLC media player.lnk
          • Size 923B
          • SHA256 bef677b7f15f25636153cedf5b2a87a909cfeac284c493801f20eb60ee182f9c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          memory/2924-4-0x0000000005840000-0x000000000584A000-memory.dmp
          Download

          memory/2924-3-0x00000000058C0000-0x00000000058D0000-memory.dmp
          Download

          memory/2924-2-0x0000000005780000-0x0000000005812000-memory.dmp
          Download

          memory/2924-0-0x0000000000DE0000-0x0000000000DEE000-memory.dmp
          Download

          memory/2924-1-0x0000000005C90000-0x0000000006234000-memory.dmp
          Download